NEAS[.]4315e79208327b55d5cd37c838557600[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4315e79208327b55d5cd37c838557600.exe
Size

332KB
MD5

4315e79208327b55d5cd37c838557600
SHA1

e520e1a2689d269628a2a60c6ae3a7f9ef4ad118
SHA256

1e85204198087a9f254fd998685c27482a941492e05304352b17eb8a6e76b7b1
SHA512

f1fed6251e65d51c2a8ad43be930100b8f1213bfaed1c356dfae484b79a19c74020f4fd29c16cb97752169bba69fb5c5b0c4626a879898850308b9337485160d
SSDEEP

6144:SYIDkR9czW2RfS150yfNNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:StkROzW2E8y1NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4315e79208327b55d5cd37c838557600.exe

Files

NEAS.4315e79208327b55d5cd37c838557600.exe
.exe windows:4 windows x86

6b6230c159a70a4ac3f4158a58ca53c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
GetModuleFileNameA
GetModuleHandleA
Sleep
ReleaseMutex
DeviceIoControl
MapViewOfFile
OpenFileMappingA
lstrcpynA
lstrlenA
CreateMutexA
OpenMutexA
GetACP
CloseHandle
CreateFileA
lstrcatA
LoadLibraryA
GetProcAddress
GetCurrentProcess
DefineDosDeviceA
FreeLibrary
HeapCreate
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
IsBadWritePtr
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
GetStartupInfoA
HeapDestroy
GetFileType
GetStdHandle
GetStringTypeW
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA

user32

IsDialogMessageA
ScreenToClient
MoveWindow
GetDlgItem
GetWindowRect
ShowWindow
MessageBoxA
LoadStringA
DefWindowProcA
SetForegroundWindow
LoadIconA
LoadCursorA
RegisterClassA
CreateDialogParamA
GetMessageA
SetWindowTextA
TranslateMessage
DispatchMessageA
ExitWindowsEx
EndDialog
GetWindowLongA
PostMessageA
PostQuitMessage
WinHelpA
SendMessageA
EnableWindow
FindWindowA
DestroyWindow
SetTimer
KillTimer
SetDlgItemTextA
DialogBoxParamA
UpdateWindow

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

setupapi

SetupOpenInfFileA
SetupCloseInfFile
SetupGetLineTextA

comctl32

ord17

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6b6230c159a70a4ac3f4158a58ca53c3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

setupapi

comctl32

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 44KB - Virtual size: 42KB

.tc Size: 244KB - Virtual size: 244KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 44KB - Virtual size: 42KB

.tc
Size: 244KB - Virtual size: 244KB